PDA

View Full Version : RC1 keeps creating "Infected Items" in O2007


Whissi
September 26th, 2007, 09:29 AM
Hello,

I configured NOD32 Antivirus v3 to delete infected items and not to move them into any folder (i did that with NOD32 v2 without problems).

The problem is, that NOD32 AV v3 creates a folder "Infected Items", although it shouldn't use that. I can delete that folder, NOD32 will create it again within seconds :)

That's a bug, isn't it?

Marcos
September 26th, 2007, 10:42 AM
Unfortunately, it is technically impossible to avoid that behavior.

Whissi
September 26th, 2007, 11:06 AM
-{ Quote: "Unfortunately, it is technically impossible to avoid that behavior." }-Why? In NOD32 Antivirus v2 it is possible and why shouldn't is possible to do it in v3, something like (logical)

// Check if we need to check if folder exists
if (option.movetofolder)
{
// We need a folder, does it exists?
if (!folder.exists(options.movetofolder)
{
// No, it doesn't... create one
create.folder(options.movetofolder)
}
}

Marcos
September 26th, 2007, 11:16 AM
-{ Quote: "Unfortunately, it is technically impossible to avoid that behavior.[/quoteWhy? In NOD32 Antivirus v2 it is possible and why shouldn't is possible to do it in v3, something like (logical)

// Check if we need to check if folder exists
if (option.movetofolder)
{
// We need a folder, does it exists?
if (!folder.exists(options.movetofolder)
{
// No, it doesn't... create one
create.folder(options.movetofolder)
}
}
" }-

Our developers informed me that the same behavior existed even in v2. It's really not that easy as you think, EMON first checks all messages in the infected folder before the scan starts. If the same message has already been scanned it won't be scanned again. The folder is created on access by EMON.